Linux Distros Unpatched Vulnerability : CVE-2026-93220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - schedext: Keep kicksync waiting on the rq's own CPU kicksyncwaitbalcb assumes it runs on the rq's CPU from the schedule tail: the snapshots it compares against...

UBUNTU-CVE-2026-98081

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: finish active block group cleanup if callzonefinish fails dozonefinish clears BLOCKGROUPFLAGZONEISACTIVE before finishing the zones. If callzonefinish then fails it returned early, leaving the now inactive block gro...

The vulnerability of the TY demultiplexer and the audio decoder in FFmpeg’s multimedia library allows a hacker to corrupt memory, cause system failures, or execute arbitrary code.

The vulnerability of the TY demultiplexer and the audio decoder in FFmpeg’s multimedia library is related to a numerical overflow issue. Exploiting this vulnerability can allow an attacker to corrupt memory, cause system failures, or execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-98023

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: reject dynamic fdb entries that reference a nexthop id The commit cited in the Fixes tag allowed VXLAN FDB entries to point to FDB nexthops so that overl...

Linux Distros Unpatched Vulnerability : CVE-2026-97970

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - watchdog: msc313e: Avoid division by zero clkgetrate could return 0. Avoid a division by zero panic. CVE-2026-97970 Note that Nessus relies on the presence of t...

The vulnerability of the mechanism for managing policies of Kibana’s data visualization agents allows a perpetrator to escalate their privileges.

The vulnerability of the mechanism for managing policies of Kibana’s data visualization agents is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

Linux Distros Unpatched Vulnerability : CVE-2026-97923

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Free histogram the var ref when its initialization fails createvarref allocates a VARREF histfield and then calls initvarref to fill it in. When that...

UBUNTU-CVE-2026-97563

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject out-of-bounds DataOffset in CIFSSMBRead The SMB1 synchronous read helper CIFSSMBRead validates the server's DataLength against CIFSMaxBufSize and the caller's count, but never validates DataOffset. The copy...

ROS-20260925-73-0018

The vulnerability of the nfconntracktcppacket function in the net/netfilter/nfconntrackprototcp.c module of the netfilter component of the Linux operating system is related to improper security checks for standard elements. Exploiting this vulnerability could allow a remote attacker to compromise...

Linux Distros Unpatched Vulnerability : CVE-2026-97918

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Undo the registration when enabling the histogram trigger fails Commit 6f86bdeab633 tracing: Fix bad hist from corrupting namedtriggers list described...

The vulnerability of the BuildKit container-building software lies in the ability to introduce or modify arguments, allowing a malicious actor to execute arbitrary commands.

The vulnerability of the BuildKit container-building software lies in the implementation or modification of arguments. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

UBUNTU-CVE-2026-97940

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix fib6 walker UAF on seq stop ipv6routeiteractive treats a walker in FWSU at the table root as already unlinked. fib6delroute can move a still-linked walker into that same state when the current leaf is the last route at...

CVE-2026-98146

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Remove countedby from struct amdxdnacmdchain struct amdxdnacmdchain contains a flexible array annotated with countedbycommandcount. Since the structure is stored in shared AMDXDNABOSHARE memory, userspace can modif...

CVE-2026-98158

In the Linux kernel, the following vulnerability has been resolved: pppasync: drop the errored frame instead of resetting its headroom pppreceivenonmpframe prepends a two-byte direction tag before running the pass/active BPF filters: be16 skbpushskb, 2 = htonsPPPFILTERINBOUNDTAG; Nothing on the...

Linux Distros Unpatched Vulnerability : CVE-2026-97525

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/mm/pat: Allocate split page tables as kernel page tables A PTE is allocated directly without going through the standard page table allocation routines such ...

Linux Distros Unpatched Vulnerability : CVE-2026-93253

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sched/isolation: Defer freeing of cpumask memblock memory to initcall When testing a linux-next kernel with commit 59bd1d914bb5 memblock: warn when freeing...

SUSE SLED15: MozillaFirefox / MozillaFirefox-branding-upstream / etc (SUSE-SU-2026:1126-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1126-1 advisory. Update to Firefox 140.9.0 ESR MFSA 2026-22, bsc1260083: - CVE-2026-4684: Race condition,...

The vulnerability of the pygments syntax highlighting library allows a hacker to trigger a service failure.

The vulnerability of the pygments syntax highlighting library is related to the use of a regular expression c, which has an inefficient computational cost. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-97608

In the Linux kernel, the following vulnerability has been resolved: netfilter: nflog: unregister loggers before per-net teardown nflogsyslog and nfnetlinklog unregister their per-network namespace operations before unregistering their global logger backends. This leaves a window where a sysctl or...

UBUNTU-CVE-2026-97602

In the Linux kernel, the following vulnerability has been resolved: inet: frags: invalidate queues before flushing them fqdirpreexit flushes the skbs from incomplete queues without changing their completion state. A fragment which found a queue before highthresh was cleared can then acquire the...